The Bottom Line
System Safety Monitor from System Safety adds a much needed extra layer of defense against today's malware attacks. The behavior and rules based controls provide critical insight into the otherwise invisible workings that - left undetected - can too often allow infection to occur. Learning mode can help clean systems stay clean and comprehensive reporting can help ferret out and block malware on already infected systems.
Pros
- Comprehensive reporting and controls
- Learning mode simplifies use on clean systems
- Provides insight into rogue DLLs and code injection attacks
- Parent/child relationships ensure greater integrity of loaded apps
Cons
- Not suitable for less experienced users
- Interface can be cumbersome to navigate
Description
- Controls low level disk and keyboard access - ideal for preventing keyloggers;
- Tracks and blocks changes to the registry and other critical system components;
- View DLLs loaded by an application and control whether DLL/code injection is allowed
Guide Review - System Safety Monitor
System Safety Monitor is host intrusion prevention software (HIPS) that monitors and reports on system events. Prominent alerts allow users to make choices as to what types of behavior should or shouldn't be allowed. As with any behavior or policy-based protection, the product is best suited to a more experienced level of user. Wrong choices could prevent normal system operation or allow a malware infection to occur. Used properly, System Safety Monitor provides much needed insight into system events and processes, providing the means to disallow behavior that might otherwise be harmful.
System Safety Monitor goes beyond many typical permission-based systems. For example, parent/child process relationships are exposed, information that can be invaluable to making the proper decision. Typically, when Internet Explorer is legitimately launched by the user, the parent process would be Explorer.exe (Windows Explorer). If a different parent process is indicated in the alert, this might be indication of DLL injection or some other symptom of infection.
Given the challenges of today's fast evolving, increasingly sophisticated, and typically rootkit-enabled malware, System Safety Monitor offers much needed adjunct protection. Pricing and purchase information is available at syssafety.com.
